Skip to content

rustls::ServerCertVerifier should check remote_public_key #11

@kpp

Description

@kpp

According to https://github.com/libp2p/specs/blob/master/tls/tls.md#libp2p-public-key-extension, the given remote_public_key should be checked inside ServerCertVerifier::verify_server_cert against P2pExtension::public_key:

The public host key allows the peer to calculate the peer ID of the peer it is connecting to. Clients MUST verify that the peer ID derived from the certificate matches the peer ID they intended to connect to, and MUST abort the connection if there is a mismatch.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions